Re:SCRYPTmail, free advanced account for everyone
by vvSaKvv on Thursday January 01, 2015 @07:02PM
(#8824859)
Not quite understand question. If you asking how do handle secret phrase, its used to decrypt user object, that comes from server when you login
[ Parent
| on HN ]
Re:SCRYPTmail, free advanced account for everyone
by read on Saturday January 03, 2015 @11:02AM
(#8831026)
I just realized I asked you the same question before.
If the server got hacked, could it send Javascript that steals a users password (which you say "never leaves your computer"), decrypts user data, and sends the password and the data to the attacker?